Technical Tip: How to configure the FortiSandbox to form HA cluster

[cysaw]

Description	This article describes how to configure the FortiSandbox to form an HA cluster.
Scope	FortiSandbox.
Solution	Below are the FortiSandbox HA-Cluster pre-requisites: Primary and secondary units Same model and configuration. Same firmware version. Worker unit.  Different model. A different set of Windows VMs from the primary or secondary units. Same firmware version. HA-Cluster requires all nodes to have port1 to be accessible. Nodes use that port to communicate with each other. Each node should have a dedicated network port for internal cluster communication. The system time must be synchronized on all nodes in the HA cluster. Prevents out-of-sync job results, logs, and statistics. Prevent the secondary device from becoming the primary device during reboot. Port1 and any other ports set through 'set admin-port' are not recommended for use as an internal communication port. Configuring the HA settings on Primary FortiSandbox by running the CLI command below in the Primary FortiSandbox unit.     > hc-settings -sc -tM –n<Primary FortiSandbox name> –c<HA-Cluster Name> -p<password for the HA> -i<HA communication interface>     > hc-settings -si –i<external interface for the cluster> -a<external IPs for this cluster> Review HA settings on Primary FortiSandbox. Configuring the Secondary FortiSandbox by running the CLI command below. > hc-settings -sc -tP –n<name of Secondary FortiSandbox > -c<HA-Cluster Name> -p<password for the HA> -i<HA communication interface> Review the HA setting on Secondary FortiSandbox. Adding the Secondary to the FortiSandbox HA Cluster by running the CLI command in the Secondary FortiSandbox. hc-worker -a –s<IP address of Primary’s HA internal communication interface> –p<password for the HA> Review the HA status. Configuring Worker FortiSandbox by running the CLI command below: > hc-settings -sc -tR –c<cluster name> -p<HA password> -n< FortiSandbox worker name> -i<HA communication interface> > hc-worker -a –s<IP address of Primary’s HA internal communication interface> –p<HA password>